But do antivirus really help with that? Is it going to check for open ports and see if the service listening has a strong password?

You can’t program against social engineering or missconfiguration, and because those are the only real vulnerabilities in Linux there’s no need for antivirus.